@oxiaom/adoremix@1.0.63
AdoreMix broadcast server - cross-platform installer, runner and service manager
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe lifecycle hook does not execute the Audio8 setup, and the setup requires an explicit user command. Because the bundled runtime archive is unreadable in this inspection and is later installed and run, warn about the staged payload without claiming a confirmed attack.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A user runs `adoremix audio8 install`.
Impact
The unverified runtime and its dependencies can execute as a local service after the user invokes setup; no confirmed attack impact was identified.
Mechanism
The command extracts the packaged archive under `~/audio8`, installs requirements from the extracted runtime, and enables and restarts a systemd service.
AI rationale
The lifecycle hook does not execute the Audio8 setup, and the setup requires an explicit user command. Because the bundled runtime archive is unreadable in this inspection and is later installed and run, warn about the staged payload without claiming a confirmed attack.
Evidence
audio8-assets/audio8-tts.tgztts/providers/audio8.jssrc/cli.js
Decision evidence
public snapshotAI called this Suspicious at 79.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package postinstall runs a hint script that prints CLI setup instructions.
- Audio8 setup is exposed through an explicit CLI install command.
- The setup extracts the bundled archive into the user's Audio8 directory.
- The setup installs Python requirements from the extracted runtime and starts a systemd service; the archive contents could not be inspected as text.
Evidence against
- The inspected source does not establish malicious behavior in the bundled archive.
- No automatic payload execution was found in the postinstall hook.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
22 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./bin/postinstall-hint.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgtts/providers/edge.jsView file
11L12: const { execFileSync } = require('child_process');
L13: const fs = require('fs');
High
Child Process
Package source references child process execution.
tts/providers/edge.jsView on unpkg · L11tts/providers/audio8.jsView file
492try {
L493: execSync(`systemctl --now disable ${AUDIO8_SYSTEMD_NAME} 2>/dev/null; true`, { stdio: 'pipe', shell: '/bin/bash' });
L494: execSync(`systemctl stop ${AUDIO8_SYSTEMD_NAME} 2>/dev/null; true`, { stdio: 'pipe', shell: '/bin/bash' });
...
L507: opts = opts || {};
L508: const baseUrl = opts.url || process.env.ADOREMIX_AUDIO8_BASE_URL || `http://127.0.0.1:${AUDIO8_DEFAULT_PORT}`;
L509: try {
Findings
3 Critical14 High7 Medium6 Low
CriticalSame File Env Network Executiontts/providers/audio8.js
CriticalTrigger Reachable Dangerous Capabilitytts/providers/audio8.js
CriticalPrevious Version Dangerous Deltatts/providers/audio8.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processtts/providers/edge.js
HighShelltts/providers/audio8.js
HighTrigger Reachable Persistencetts/providers/audio8.js
HighShips High Entropy Blobaudio8-assets/audio8-tts.tgz
HighKnown Malware Source Similaritysrc/install.js
HighKnown Malware Source Similaritysrc/config-manager.js
HighKnown Malware Source Similaritysrc/nginx.js
Affected versions and remediation
This report applies to @oxiaom/adoremix@1.0.63.
See all versions of @oxiaom/adoremix for other recorded verdicts.
- Review the evidence and your use of @oxiaom/adoremix@1.0.63 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.